$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft File: P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft (raw, json) Hash identifier: 4LQ3WD1c+UO6tQdxzSvibay9I1QMT3P5+kZV4ogoW/c= Subject key identifier: 48:2B:80:9C:AC:08:5B:8F:8C:C6:26:5F:CB:6C:A2:94:85:94:CC:94 Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97 Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft Manifest number: 02AC Signing time: Fri 25 Apr 2025 01:15:25 +0000 Manifest this update: Fri 25 Apr 2025 01:15:24 +0000 Manifest next update: Fri 02 May 2025 01:15:24 +0000 Files and hashes: 1: P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl (hash: 5dOOVbmFUwOow7qocrcw/cwMDOlZtALoe+UPERx/QrY=) 2: 460F948CF58C11ECAE269934C4F9AE02.roa (hash: kddDiY1SaBXbZLYfj0lZgL5nuCOTpHEBUPrzkMRd/3M=) 3: 38813674CA6811EE9891A565C4F9AE02.roa (hash: VaWJ6J0IlQoYXLmwhQtNPeXFzSE+FlLg3wqm3Amu1U8=) 4: E26E62FC008211EE9714031BC4F9AE02.roa (hash: +KyX9vvCwN+wQz/+dPxZBeEKewfgwPoob9Rj+QTsatE=) 5: 313960C04B1611EEABEB165BC4F9AE02.roa (hash: V/kLIJF72EbkRxner8trjaHxjqjLSORXYEwlwdwNr6I=) 6: E35980B0591B11EEB8B55278C4F9AE02.roa (hash: UvUYjmVMRyKH2JJzg00ODGpsfs1qdbqhDd2QCdDIfg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097 Validity Not Before: Apr 25 01:15:24 2025 GMT Not After : May 2 01:15:24 2025 GMT Subject: CN=680ae22d-0014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:a6:27:65:5f:7c:f6:5b:98:72:31:75:bd: 97:7f:d0:b6:ac:f4:bc:c2:85:42:f6:d0:0c:5b:af: cd:26:0f:5e:ed:44:c8:e7:dc:1d:25:52:31:2b:99: 68:a8:52:24:96:59:d3:73:9a:cd:e9:c7:e6:20:3e: d0:ee:82:bb:f1:9d:c4:8d:9c:9f:90:d2:12:c1:fc: 8c:4d:fe:10:84:71:e9:73:1f:f4:a6:b3:0b:00:c3: 10:d1:72:bb:fa:77:04:58:68:00:67:52:8d:2f:2a: 44:6c:f4:77:6b:13:6a:f6:55:a1:5a:eb:46:f1:df: c4:40:c8:71:39:a0:66:20:b5:24:48:66:1b:87:81: 6c:e6:ca:c9:4f:ff:32:b6:41:77:13:88:94:18:41: f2:31:fd:14:ac:73:fb:8d:18:ce:87:d3:ee:18:87: 5f:46:fe:aa:f2:ef:58:3e:2d:44:52:fe:33:8c:24: 13:37:5d:32:70:92:3b:e4:97:32:1b:68:9f:60:64: 11:d7:cf:b4:08:15:0f:6a:5d:68:fc:bd:3d:0d:ca: 5c:c7:11:15:df:6f:38:84:da:5f:df:69:8c:90:6d: a4:85:d7:05:46:8f:4d:66:3d:7a:40:20:90:7a:e3: 4d:ba:44:9e:5a:cd:f3:7f:cf:e7:78:b6:1c:2a:6f: b7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2B:80:9C:AC:08:5B:8F:8C:C6:26:5F:CB:6C:A2:94:85:94:CC:94 X509v3 Authority Key Identifier: keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:59:03:16:ca:f9:18:16:fb:cd:fa:72:0b:f6:02:34:dd:8c: 2c:4a:86:9e:cf:e7:b2:64:e4:8c:e8:a5:b9:5e:89:bf:cd:7f: 4c:8a:ad:b3:bd:e6:39:07:a8:6b:45:be:57:ab:49:6a:91:10: c7:bf:f8:be:39:84:30:46:44:da:d8:27:60:37:e8:89:2c:be: 7b:7e:c1:2b:a7:46:d8:1f:23:7e:5b:cc:72:22:20:51:78:ff: 0d:de:d8:88:06:f4:73:5b:a5:68:64:d5:fa:05:16:13:1b:a8: e5:33:2f:af:ee:c9:aa:24:68:8e:08:f8:49:40:7c:f0:e4:78: c6:41:02:9a:3a:3f:33:35:b9:87:a3:35:5b:1a:2b:9b:72:f8: 21:48:84:bc:42:77:49:e8:2e:6f:2c:8b:d4:3e:c9:42:c1:94: 36:82:3c:5e:45:3a:c7:74:5a:4d:60:b4:9c:39:57:b2:ac:20: 66:69:e0:5a:cb:a8:cb:15:31:99:d2:ad:06:5b:40:b4:4c:1e: f5:30:38:fa:8e:8f:8f:6c:d0:d1:60:14:27:e3:30:50:fb:4a: d3:e9:4d:8d:3d:56:6e:4d:87:1f:7d:8e:38:6e:d1:c2:7a:8b: a6:98:1a:a4:24:22:53:89:0a:94:25:6a:2b:70:58:56:6d:36: fe:de:1c:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2NDYxMTAvBgNVBAUTKDNGQjM1ODI0NzBFRDAzRjE5NDM1RTY5QjJDMTlCNDA3 NDc3MEYwOTcwHhcNMjUwNDI1MDExNTI0WhcNMjUwNTAyMDExNTI0WjAYMRYwFAYD VQQDEw02ODBhZTIyZC0wMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9qmJ2VffPZbmHIxdb2Xf9C2rPS8woVC9tAMW6/NJg9e7UTI59wdJVIxK5lo qFIkllnTc5rN6cfmID7Q7oK78Z3EjZyfkNISwfyMTf4QhHHpcx/0prMLAMMQ0XK7 +ncEWGgAZ1KNLypEbPR3axNq9lWhWutG8d/EQMhxOaBmILUkSGYbh4Fs5srJT/8y tkF3E4iUGEHyMf0UrHP7jRjOh9PuGIdfRv6q8u9YPi1EUv4zjCQTN10ycJI75Jcy G2ifYGQR18+0CBUPal1o/L09DcpcxxEV3284hNpf32mMkG2khdcFRo9NZj16QCCQ euNNukSeWs3zf8/neLYcKm+3IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgrgJys CFuPjMYmX8tsopSFlMyUMB8GA1UdIwQYMBaAFD+zWCRw7QPxlDXmmywZtAdHcPCX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTY0Ni8yRjYzOUVCMEY1 ODUxMUVDODdGNkZFMTNDNEY5QUUwMi9QN05ZSkhEdEFfR1VOZWFiTEJtMEIwZHc4 SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3TllKSER0QV9HVU5lYWJMQm0wQjBkdzhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTY0Ni8yRjYzOUVCMEY1ODUxMUVDODdGNkZFMTNDNEY5QUUwMi9QN05ZSkhEdEFf R1VOZWFiTEJtMEIwZHc4SmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/WQMWyvkYFvvN+nIL9gI03YwsSoaez+eyZOSM6KW5Xom/zX9Miq2z veY5B6hrRb5Xq0lqkRDHv/i+OYQwRkTa2CdgN+iJLL57fsErp0bYHyN+W8xyIiBR eP8N3tiIBvRzW6VoZNX6BRYTG6jlMy+v7smqJGiOCPhJQHzw5HjGQQKaOj8zNbmH ozVbGiubcvghSIS8QndJ6C5vLIvUPslCwZQ2gjxeRTrHdFpNYLScOVeyrCBmaeBa y6jLFTGZ0q0GW0C0TB71MDj6jo+PbNDRYBQn4zBQ+0rT6U2NPVZuTYcffY44btHC eoummBqkJCJTiQqUJWorcFhWbTb+3hzd -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:55 2025 by rpki-client